Overriding Aaa Accounting Nas Information; Udp Checksums; Collecting Accounting Statistics; Configuring Radius Aaa Servers - Juniper JUNOSE SOFTWARE 11.2.X - BROADBAND ACCESS CONFIGURATION GUIDE 7-20-2010 Configuration Manual

JunosE 11.2.x Broadband Access Configuration Guide

UDP Checksums

Collecting Accounting Statistics

Configuring RADIUS AAA Servers

22
Enable broadcast accounting. Enter the correct virtual router context, and specify
3.
the virtual router group whose virtual routers will receive the accounting information.
host1(config)#virtual-router opVr100
host1:opVr100(config)#aaa accounting broadcast groupXyzCompany

Overriding AAA Accounting NAS Information

AAA accounting packets normally include two RADIUS attributes—NAS-IP-Address [4]
and NAS-Identifier [32]—of the virtual router that generates the accounting information.
You can override the default configuration and specify that accounting packets from
particular broadcast virtual routers instead include the NAS-IP-Address and NAS-Identifier
attributes of the authenticating virtual router.
To override the normal AAA accounting NAS information, access the correct virtual router
context, and use the radius override nas-info command. For example:
host1(config)#virtual-router vrXyz1
host1:vrXyz1(config)#radius override nas-info
host1:vrXyz1(config)#virtual-router vrXyz2
host1:vrXyz2(config)#radius override nas-info
host1:vrXyz3(config)#exit
host1(config)#
Each virtual router on which you configure B-RAS is enabled to perform UDP checksums
by default. You can disable and reenable UDP checksums.
You can use the aaa accounting statistics command to specify how the AAA server
collects statistics on the sessions it manages. Use the volume-time keyword to specify
that AAA notifies applications to collect a full set of statistics from each of their
connections. Use the time keyword to specify that only the uptime status is collected
for each connection. Collecting only uptime information reduces the amount of data sent
to AAA and is a more efficient use of system resources for customers that do not need
a full set of statistics. The router collects a full set of statistics by default.
The number of RADIUS servers you cansure configure depends on available memory.
The router has an embedded RADIUS client for authentication and accounting.
NOTE: You can configure B-RAS with RADIUS accounting, but without RADIUS
authentication. In this configuration, the username and password on the remote end
are not authenticated and can be set to any value.
You must assign an IP address to a RADIUS authentication or accounting server to
configure it.
Copyright © 2010, Juniper Networks, Inc.